pfsense_report_issue · Pfsense MCP: Risk & Policy

WHAT IT DOES

What pfsense_report_issue does on Pfsense

AI agents call pfsense_report_issue as a supporting operation in Pfsense workflows.

WHY IT NEEDS A POLICY

Why pfsense_report_issue needs a policy

With no description available, classification relies solely on the name. 'Report issue' implies submitting a bug report or diagnostic report, which is likely a Write or Other action with low impact. Cannot determine more precisely without a description, so confidence is low.

From the tool's definition Tool description is empty and uninformative; tool name 'pfsense_report_issue' suggests reporting a problem rather than performing a destructive or privileged action.

Attacks that exploit this kind of access

Recommended rule Ready

Verdict

pfsense_report_issue Rate-limited

pfsense_report_issue gets a rate cap, and everything else on the server is denied unless you say otherwise.

View as policy code

policy.json

{
  "version": "1",
  "default": "deny",
  "tools": {
    "pfsense_report_issue": {
      "limits": [
        {
          "counter": "pfsense_report_issue_rate",
          "window": "minute",
          "max": 60,
          "scope": "grant"
        }
      ]
    }
  }
}

SET A RULE FOR THIS TOOL →

Instant setup, no code required.

PolicyLayer is an MCP gateway: every tool call is checked against your rule before it reaches Pfsense, so you can run agents against it safely.

FAQ

Questions about pfsense_report_issue

What does the pfsense_report_issue tool do? +

pfsense_report_issue. It is categorised as a Other tool in the Pfsense MCP Server, which means it performs auxiliary operations.

How do I enforce a policy on pfsense_report_issue? +

Register the Pfsense MCP server in PolicyLayer and add a rule for pfsense_report_issue: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches Pfsense. Nothing to install.

What risk level is pfsense_report_issue? +

pfsense_report_issue is a Other tool with low risk. Read-only tools are generally safe to allow by default.

Can I rate-limit pfsense_report_issue? +

Yes. Add a rate_limit block to the pfsense_report_issue rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block pfsense_report_issue completely? +

Set action: deny in the PolicyLayer policy for pfsense_report_issue. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides pfsense_report_issue? +

pfsense_report_issue is provided by the Pfsense MCP server (abl030/pfsense-mcp). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.